CVE-2025-25252
Unknown Unknown - Not Provided
BaseFortify

Publication date: 2025-10-14

Last updated on: 2025-10-15

Assigner: Fortinet, Inc.

Description
An Insufficient Session Expiration vulnerability [CWE-613] in FortiOS SSL VPN 7.6.0 through 7.6.2, 7.4.0 through 7.4.6, 7.2.0 through 7.2.10, 7.0.0 through 7.0.16, 6.4 all versions may allow a remote attacker (e.g. a former admin whose account was removed and whose session was terminated) in possession of the SAML record of a user session to access or re-open that session via re-use of SAML record.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2025-10-14
Last Modified
2025-10-15
Generated
2026-06-16
AI Q&A
2025-10-14
EPSS Evaluated
2026-06-15
NVD
CVE-2025-25252
Affected Vendors & Products
Showing 4 associated CPEs
Vendor Product Version / Range
fortinet fortios From 7.4.0 (inc) to 7.4.9 (inc)
fortinet fortios From 7.4.0 (inc) to 7.4.9 (inc)
fortinet fortios From 7.4.0 (inc) to 7.4.9 (inc)
fortinet fortios From 7.4.0 (inc) to 7.4.9 (inc)
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-613 According to WASC, "Insufficient Session Expiration is when a web site permits an attacker to reuse old session credentials or session IDs for authorization."
Attack-Flow Graph
AI Quick Actions
Instant insights powered by AI
Executive Summary

This vulnerability is an Insufficient Session Expiration issue in FortiOS SSL VPN versions 6.4 through 7.6.2. It allows a remote attacker, such as a former admin whose account was removed and session terminated, to reuse the SAML record of a user session to access or reopen that session. Essentially, sessions are not properly expired, enabling unauthorized access through session reuse.

Impact Analysis

This vulnerability can allow unauthorized remote attackers to access or reopen user sessions by reusing SAML records, potentially leading to unauthorized access to the VPN and associated network resources. This could compromise confidentiality and integrity of data accessible through the VPN.

Chat Assistant
Ask questions about this CVE
Hi! I’m here to help you understand CVE-2025-25252. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70
EPSS Chart